Courseiva
Kubernetes FundamentalshardMultiple SelectObjective-mapped

KCNA Kubernetes Fundamentals Practice Question

Which THREE of the following are true about Kubernetes labels and selectors?

⚠ Common exam trap

CNCF often tests the misconception that labels are immutable like certain other Kubernetes fields, but labels are explicitly designed to be mutable for dynamic resource management.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Set-based selectors support operators like 'In' and 'NotIn'

Kubernetes set-based selectors support operators like 'In', 'NotIn', 'Exists', and 'DoesNotExist', allowing more flexible matching than equality-based selectors. This is defined in the Kubernetes API specification for label selectors, enabling complex filtering of resources.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Labels are encrypted at rest by default

    Why it's wrong here

    Labels are not encrypted; they are stored in plaintext in etcd unless encryption is configured.

  • Set-based selectors support operators like 'In' and 'NotIn'

    Why this is correct

    Set-based selectors support 'In', 'NotIn', 'Exists', and 'DoesNotExist'.

  • Selectors can be used by Services to identify which pods to route traffic to

    Why this is correct

    Services use label selectors to determine the pod endpoints.

  • Labels are immutable after creation

    Why it's wrong here

    Labels can be modified using kubectl label.

  • Labels can be used to organize and select subsets of objects

    Why this is correct

    Labels are key-value pairs used to organize and select objects.

About these practice questions

One of 833 original KCNA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This KCNA practice question is part of Courseiva's free CNCF certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the KCNA exam.